v3.5.0

What's new

Foundry IQ knowledge sources - 4 net-new preview integrations.

• SharePoint (remote) - live retrieval from SharePoint via the Copilot Retrieval API, with per-user ACL through on-behalf-of. See SharePoint remote howto.
• OneLake (indexed) - Fabric OneLake as a knowledge source, indexed and queried natively by Foundry IQ. See OneLake howto.
• SharePoint (indexed) - SharePoint indexed by Foundry IQ using app-only Graph auth (Sites.Selected preferred). See SharePoint indexed howto.
• Web grounding (Bing) - public web results scoped by allow/block domain lists, billed per Bing call. See Web grounding howto.

All four are OFF by default and gated by their own App Config flags. Existing deployments keep working with no config change.

Kind strings (case-sensitive) at retrieve time:

• remoteSharePoint
• indexedOneLake
• indexedSharePoint
• web

Fixed

• _normalize_references dispatch is now more specific: SharePoint remote requires resourceMetadata (the Copilot Retrieval API's unique marker), so SharePoint Indexed and Work IQ references route to the correct normalizer instead of being greedily consumed.

Validation

Full pytest suite: 354 passed on develop after all four merges (baseline was 328 pre-fleet; each PR added 7-11 tests).

Follow-ups

• SharePoint Indexed Bicep module lands in a follow-up PR to Azure/bicep-ptn-aiml-landing-zone.
• aka.ms/gpt-rag/sharepoint-indexed-prereqs vanity URL registration.
• Fabric workspace RBAC for OneLake KS is a manual step (documented in the howto).